Partiful: Fun Party Invites Security & Privacy Scorecard
Android
User activity, device data, and interactions are shared with six third-party companies including Facebook, Google Analytics, FullStory, and Amplitude. FullStory can record in-app sessions, meaning taps and navigation may be replayed by the developer. Data flows to advertising and analytics networks beyond what is needed to send an invite.
Best for
Social planners comfortable with broad data sharing
Avoid if
You keep your social circle or location habits private
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Unencrypted AsyncStorage with Backup Exposure
- Hardcoded API Keys in Resources
- Exported Component Security Issue
Top privacy issues
- FullStory WebView Injection Records Sensitive Content
- Inaccurate Google Play Data Safety Declaration
- Inadequate Third-Party SDK Security Controls
Full analysis
Partiful: Fun Party Invites
Version: 2.11.07 (Build 1370693) | Scanned: December 19, 2025
What This Means for You
User activity, device data, and interactions are shared with six third-party companies including Facebook, Google Analytics, FullStory, and Amplitude. FullStory can record in-app sessions, meaning taps and navigation may be replayed by the developer. Data flows to advertising and analytics networks beyond what is needed to send an invite.
Recommendation: Use With Caution
Best For: Social planners comfortable with broad data sharing
Avoid If: You keep your social circle or location habits private
Key Findings
Data Security - 1 finding (1 critical)
Network Security - 1 finding (1 critical)
Code Safety - 0 findings
Privacy - 2 findings (2 critical)
Privacy Concerns
What Data is Collected
Partiful collects device identifiers, behavioral data, and social interaction patterns. This includes who users invite to events, their contact list, and how they navigate within the app. Event attendance and social connections are part of the data profile.
Third-Party Data Sharing
User data is shared with six external services:
- FullStory - Session recording: user taps and in-app navigation may be stored and replayed by the developer
- Firebase - App infrastructure and crash reporting
- Google Analytics - Behavioral tracking and usage analysis
- Facebook SDK - Social data and advertising targeting
- Amplitude - Product analytics and user behavior profiling
- Sentry - Error and performance monitoring
Understanding the Scores
| Category | Score |
|---|---|
| Security | 58/100 |
| Privacy | 45/100 |
| Data Security | 55/100 |
| Network Security | 85/100 |
| Code Safety | 65/100 |
| Data Collection | 50/100 |
| Data Sharing | 40/100 |
| User Control | 42/100 |
Positive Security Features
- None identified for this version.
Areas for Improvement
- The app shares behavioral data and social connections with advertising and analytics platforms beyond what is required to deliver its core features.
- Session recording through FullStory means in-app activity, including taps and navigation paths, may be stored and replayed by the developer or their partners.
- User ability to limit or opt out of data collection is restricted, with few user-facing controls over how information is used by third parties.
About This Analysis
This scorecard is based on automated static analysis of the app binary. Scores reflect the security and privacy posture of the app at the time of the scan.
App Details
| Field | Value |
|---|---|
| App Name | Partiful: Fun Party Invites |
| Package ID | com.partiful.partiful |
| Version | 2.11.07 (Build 1370693) |
| Scan Date | December 19, 2025 |
| Platform | Android |
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #2 (current) | 52/100 | |
| #1 | 72/100 |